Merge branch 'issue_348728_locking_package_registry' into 'master'

Stop Package when namespace over_storage_limit

See merge request gitlab-org/gitlab!83933

ee/app/policies/ee/group_policy.rb

@@ -405,6 +405,7 @@ module EE
         prevent :admin_group_member
         prevent :create_deploy_token
         prevent :create_subgroup
+        prevent :create_package
       end
 
       rule { can?(:owner_access) & group_membership_export_available }.enable :export_group_memberships

ee/app/policies/ee/project_policy.rb

@@ -397,6 +397,7 @@ module EE
         readonly_features.each do |feature|
           prevent(*create_update_admin(feature))
         end
+        prevent :create_package
       end
 
       rule { auditor | can?(:developer_access) }.enable :add_project_to_instance_security_dashboard

ee/spec/policies/group_policy_spec.rb

@@ -1478,7 +1478,7 @@ RSpec.describe GroupPolicy do
     let(:policies) do
       %i[create_projects create_epic update_epic admin_milestone upload_file admin_label
          admin_issue_board_list admin_issue admin_pipeline admin_group_runners register_group_runners add_cluster
-         create_cluster update_cluster admin_cluster admin_group_member create_deploy_token create_subgroup]
+         create_cluster update_cluster admin_cluster admin_group_member create_deploy_token create_subgroup create_package]
     end
 
     before do

ee/spec/policies/project_policy_spec.rb

@@ -1729,7 +1729,7 @@ RSpec.describe ProjectPolicy do
     let(:current_user) { owner }
     let(:abilities) do
       described_class.readonly_features.flat_map { |feature| described_class.create_update_admin(feature) } +
-        described_class.readonly_abilities
+        described_class.readonly_abilities + %i[create_package]
     end
 
     before do